NO-ISSUE: Synchronize From Upstream Repositories by openshift-bot · Pull Request #1338 · openshift/operator-framework-olm

openshift-bot · 2026-07-15T00:07:56Z

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date	Commit	Author	Message
2026-07-14 06:41:26	operator-framework/operator-lifecycle-manager@396954f	dependabot[bot]	🌱 Bump golang.org/x/sync from 0.21.0 to 0.22.0 (#3870)
2026-07-14 06:46:57	operator-framework/operator-lifecycle-manager@fdd5594	dependabot[bot]	🌱 Bump github.com/prometheus/common from 0.69.0 to 0.70.0 (#3869)
2026-07-14 10:46:25	operator-framework/operator-lifecycle-manager@a4f060a	dependabot[bot]	🌱 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#3868)
2026-07-15 10:15:40	operator-framework/operator-lifecycle-manager@174dccd	Jordan Keister	deploy/chart: add static NetworkPolicies for CatalogSource gRPC ingress and bundle unpack egress (#3863)
2026-07-15 21:14:14	operator-framework/operator-lifecycle-manager@b0123be	Chiman Jain	Migrate deprecated gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#3865)
2026-07-21 07:59:27	operator-framework/operator-lifecycle-manager@f59f6ec	dependabot[bot]	🌱 Bump github.com/prometheus/client_golang (#3872)
2026-07-21 08:02:33	operator-framework/operator-lifecycle-manager@0a601aa	dependabot[bot]	Bump actions/setup-go from 6 to 7 (#3873)
2026-07-21 08:05:38	operator-framework/operator-lifecycle-manager@53c9aaa	dependabot[bot]	🌱 Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 (#3874)
2026-07-21 08:08:27	operator-framework/operator-lifecycle-manager@7d437b8	dependabot[bot]	🌱 Bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#3875)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/assign @openshift/openshift-team-operator-runtime

Summary by CodeRabbit

New Features
- Added network policies to allow catalog gRPC ingress on TCP port 50051.
- Added controlled egress for managed bundle-unpack workloads.
- Applied these policies consistently across standard manifests, MicroShift, and Helm deployments.
Maintenance
- Updated Go libraries and YAML tooling.
- Updated CI workflows to use the latest Go setup action.
Tests
- Updated YAML handling in operator tests without changing test behavior.

openshift-ci-robot · 2026-07-15T00:08:00Z

@openshift-bot: This pull request explicitly references no jira issue.

Details

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message

2026-07-14 06:41:26 operator-framework/operator-lifecycle-manager@396954f dependabot[bot] 🌱 Bump golang.org/x/sync from 0.21.0 to 0.22.0 (#3870)

2026-07-14 06:46:57 operator-framework/operator-lifecycle-manager@fdd5594 dependabot[bot] 🌱 Bump github.com/prometheus/common from 0.69.0 to 0.70.0 (#3869)

2026-07-14 10:46:25 operator-framework/operator-lifecycle-manager@a4f060a dependabot[bot] 🌱 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#3868)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/assign @openshift/openshift-team-operator-runtime

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-07-15T00:08:14Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: d1ea41d2-ea4f-40b3-87c5-fbc674ec0197

📥 Commits

Reviewing files that changed from the base of the PR and between 0711859 and ece9ee5.

⛔ Files ignored due to path filters (129)

go.sum is excluded by !**/*.sum
staging/operator-lifecycle-manager/go.sum is excluded by !**/*.sum
vendor/github.com/go-logr/logr/context_noslog.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/context_slog.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/funcr/funcr.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/funcr/slogsink.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/sloghandler.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/slogr.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/slogr/slogr.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-logr/logr/slogsink.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/flate/dict_decoder.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/flate/inflate.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/huff0/build_table.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/internal/snapref/decode.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/dict.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_base.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_best.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_better.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_dfast.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_fast.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/enc_jobs.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/encoder.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/encoder_options.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.s is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/fse_decoder_arm64.s is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/fse_decoder_asm.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/fse_decoder_generic.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_amd64.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_amd64.s is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_arm64.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_arm64.s is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_asm.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/klauspost/compress/zstd/seqdec_generic.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/operator-framework/operator-lifecycle-manager/util/cpb/main.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header/header.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/collectors/go_collector_go116.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/collectors/go_collector_latest.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/counter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/desc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/expvar_collector.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/gauge.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/go_collector_go116.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/go_collector_latest.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/histogram.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/internal/difflib.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/labels.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/metric.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/process_collector_darwin.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/process_collector_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/promhttp/http.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/promhttp/instrument_client.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/promhttp/instrument_server.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/promhttp/option.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/registry.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/summary.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/timer.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/vec.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/client_golang/prometheus/wrap.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/Makefile.common is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/SECURITY.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/crypto.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/mountinfo.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/net_wireless.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/procfs/proc_cgroup.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/crypto/openpgp/armor/armor.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/crypto/openpgp/errors/errors.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/crypto/openpgp/packet/packet.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/crypto/openpgp/read.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/crypto/openpgp/s2k/s2k.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/net/http2/transport_wrap.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/net/idna/idna.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sync/semaphore/semaphore.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/cpu/parse.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_386.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_amd64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_arm.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_arm64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_loong64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_ppc.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_s390x.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zerrors_linux.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_386.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_loong64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/windows/security_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/windows/syscall_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/sys/windows/types_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/text/cases/context.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/text/cases/map.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/text/unicode/norm/forminfo.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/text/unicode/norm/iter.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/text/unicode/norm/normalize.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/go/packages/packages.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/gcimporter/iexport.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/gcimporter/iimport.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/imports/fix.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/imports/imports.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/stdlib/deps.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/stdlib/manifest.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/typesinternal/element.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/typesinternal/types.go is excluded by !**/vendor/**, !vendor/**
vendor/golang.org/x/tools/internal/typesinternal/zerovalue.go is excluded by !**/vendor/**, !vendor/**
vendor/google.golang.org/grpc/internal/envconfig/envconfig.go is excluded by !**/vendor/**, !vendor/**
vendor/google.golang.org/grpc/internal/transport/controlbuf.go is excluded by !**/vendor/**, !vendor/**
vendor/google.golang.org/grpc/internal/transport/http2_client.go is excluded by !**/vendor/**, !vendor/**
vendor/google.golang.org/grpc/internal/transport/http2_server.go is excluded by !**/vendor/**, !vendor/**
vendor/google.golang.org/grpc/version.go is excluded by !**/vendor/**, !vendor/**
vendor/modules.txt is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (11)

go.mod
manifests/0000_50_olm_01-networkpolicies.yaml
microshift-manifests/0000_50_olm_01-networkpolicies.yaml
staging/operator-lifecycle-manager/.github/workflows/e2e-tests.yml
staging/operator-lifecycle-manager/.github/workflows/goreleaser.yaml
staging/operator-lifecycle-manager/.github/workflows/sanity.yaml
staging/operator-lifecycle-manager/.github/workflows/unit.yml
staging/operator-lifecycle-manager/deploy/chart/templates/0000_50_olm_01-networkpolicies.yaml
staging/operator-lifecycle-manager/go.mod
staging/operator-lifecycle-manager/pkg/controller/operators/catalog/operator_test.go
staging/operator-lifecycle-manager/util/cpb/main.go

🚧 Files skipped from review as they are similar to previous changes (5)

staging/operator-lifecycle-manager/util/cpb/main.go
manifests/0000_50_olm_01-networkpolicies.yaml
microshift-manifests/0000_50_olm_01-networkpolicies.yaml
staging/operator-lifecycle-manager/deploy/chart/templates/0000_50_olm_01-networkpolicies.yaml
staging/operator-lifecycle-manager/go.mod

Walkthrough

Dependency versions and YAML module usage were updated, CI workflows now use actions/setup-go@v7, operator tests were reformatted, and static, MicroShift, and Helm manifests add catalog ingress and bundle-unpack egress network policies.

Changes

OLM dependency, policy, and workflow updates

Layer / File(s)	Summary
Dependency and YAML updates `go.mod`, `staging/operator-lifecycle-manager/go.mod`, `staging/operator-lifecycle-manager/util/cpb/main.go`, `staging/operator-lifecycle-manager/pkg/controller/operators/catalog/operator_test.go`	Dependency versions and YAML module/import references were updated, including the switch to `go.yaml.in/yaml/v3`.
Network policy resources `manifests/...`, `microshift-manifests/...`, `staging/operator-lifecycle-manager/deploy/chart/templates/...`	Added catalog gRPC ingress policies and bundle-unpack egress policies to static and templated manifests.
CI Go setup updates `staging/operator-lifecycle-manager/.github/workflows/*`	Changed workflow Go setup actions from version 6 to version 7 across build, test, analysis, verification, and release jobs.
Operator test maintenance `staging/operator-lifecycle-manager/pkg/controller/operators/catalog/operator_test.go`	Reformatted test setup and fake operator configuration without changing test logic or expectations.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: joelanford, perdasilva, tmshort

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the PR as an upstream synchronization, which matches the dependency, manifest, and workflow updates.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	No modified file adds or changes Ginkgo-style titles; the touched test file only has standard Go tests and formatting/import updates.
Test Structure And Quality	✅ Passed	PASS: operator_test.go changes are formatting/import-only; no Ginkgo blocks or Eventually/Consistently calls were added, so no new test-structure issues.
Microshift Test Compatibility	✅ Passed	No new Ginkgo e2e specs appear in the actual diff; changes are manifests, deps, workflows, and vendored gRPC code only.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added in the diff; the only test file changes are formatting/import updates in unit tests.
Topology-Aware Scheduling Compatibility	✅ Passed	Touched manifests/templates only add NetworkPolicies; no nodeSelector, affinity, topologySpreadConstraints, replica, or taint/toleration scheduling changes were introduced.
Ote Binary Stdout Contract	✅ Passed	No PR diff adds process-level stdout writes; the touched Go files are unchanged or dependency-only, and the existing `fmt.Print*` in util/cpb/main.go predates the PR.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added; the only changed test source is a plain Go unit-test file, and its diff adds no IPv4 or external-connectivity assumptions.
No-Weak-Crypto	✅ Passed	No weak-crypto primitives or constant-time secret comparisons appear in the PR diff; changes are dependency bumps, manifests, workflows, and gRPC transport refactors.
Container-Privileges	✅ Passed	Reviewed all summarized changed files; no privileged/hostPID/hostNetwork/hostIPC/SYS_ADMIN/allowPrivilegeEscalation/root settings were present, and the YAML changes are NetworkPolicies only.
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The only new log found is grpc’s streamID debug message; no added logs print secrets, PII, hostnames, or customer data.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

openshift-ci · 2026-07-15T00:08:23Z

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-07-15T00:08:23Z

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

perdasilva · 2026-07-15T14:11:28Z

/retest

openshift-ci · 2026-07-16T00:08:43Z

New changes are detected. LGTM label has been removed.

perdasilva · 2026-07-21T07:58:03Z

/retest

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.21.0 to 0.22.0. - [Commits](golang/sync@v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 396954f2ceb5cc5e68ee364fb161525c05390b9e

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.69.0 to 0.70.0. - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: fdd559459e09fce51148f8662f452018b55ea513

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.56.0 to 0.57.0. - [Commits](golang/net@v0.56.0...v0.57.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: a4f060a9b8a125234a14099bb0f834219b5598eb

…ss and bundle unpack egress (#3863) * deploy/chart: add static NetworkPolicies for CatalogSource gRPC ingress and bundle unpack egress The Helm chart's default-deny-all-traffic policy blocked two critical traffic paths that are not covered by the existing static NetworkPolicies: 1. CatalogSource registry pods need to accept inbound gRPC connections on port 50051 from within the cluster. The catalog-operator reconciler already creates per-CatalogSource NetworkPolicies for this, but there is a bootstrapping gap between when default-deny-all-traffic is applied and when the controller first reconciles each CatalogSource. 2. Bundle-unpack Job pods need egress to reach the Kubernetes API server and container registries. The API server port is not statically specifiable because it varies across Kubernetes implementations, so a wildcard egress rule is used. Adds two new NetworkPolicies to the chart: - catalog-source-grpc-server: selects all pods carrying the olm.catalogSource label and allows ingress on the gRPC port. - bundle-unpack-egress: selects all pods carrying both the olm.managed=true and operatorframework.io/bundle-unpack-ref labels and allows unrestricted egress. Fixes: operator-framework/operator-lifecycle-manager#3676 Signed-off-by: grokspawn <jordan@nimblewidget.com> * deploy/chart: use catalog_namespace for CatalogSource and bundle-unpack NPs CatalogSource registry pods and bundle-unpack Jobs run in the namespace determined by .Values.catalog_namespace, not .Values.namespace. When a user overrides catalog_namespace to differ from namespace, the NetworkPolicies must be created in catalog_namespace to actually apply to those pods. Fixes review feedback on #3863. Signed-off-by: grokspawn <jordan@nimblewidget.com> --------- Signed-off-by: grokspawn <jordan@nimblewidget.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 174dccd0bd85f25fa9671839bbb21dc3a23cffc6

* chore: migrate deprecated gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 Signed-off-by: Chiman Jain <chimanjain15@gmail.com> * chore: run go mod tidy Signed-off-by: Chiman Jain <chimanjain15@gmail.com> --------- Signed-off-by: Chiman Jain <chimanjain15@gmail.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: b0123beceac05a5d08b6d5734b1b7772a4fda921

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.23.2 to 1.24.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: f59f6ece21efeef554981a5dedb44f3304e51e15

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v6...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 0a601aa745fa4293402df4a761f74de17c474400

Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.4.3 to 1.4.4. - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.3...v1.4.4) --- updated-dependencies: - dependency-name: github.com/go-logr/logr dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 53c9aaaf51622c5abc1b3d81277269874dfe6292

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.0...v1.82.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.82.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 7d437b85b1bc9b720f210dadb708a9d0285bc8b4

openshift-ci · 2026-07-22T00:11:32Z

New changes are detected. LGTM label has been removed.

openshift-ci · 2026-07-22T05:15:08Z

@openshift-bot: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-upgrade-ovn-single-node	`ece9ee5`	link	false	`/test e2e-aws-upgrade-ovn-single-node`
ci/prow/e2e-gcp-ovn	`ece9ee5`	link	true	`/test e2e-gcp-ovn`
ci/prow/okd-scos-images	`ece9ee5`	link	true	`/test okd-scos-images`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jul 15, 2026

openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jul 15, 2026

openshift-ci Bot requested review from joelanford and tmshort July 15, 2026 00:08

openshift-bot force-pushed the synchronize-upstream branch from 636c4d3 to 0711859 Compare July 16, 2026 00:08

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 16, 2026

openshift-bot added the lgtm Indicates that a PR is ready to be merged. label Jul 17, 2026

dependabot Bot and others added 9 commits July 22, 2026 00:05

openshift-bot force-pushed the synchronize-upstream branch from 0711859 to ece9ee5 Compare July 22, 2026 00:11

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

NO-ISSUE: Synchronize From Upstream Repositories#1338

NO-ISSUE: Synchronize From Upstream Repositories#1338
openshift-bot wants to merge 9 commits into
openshift:mainfrom
openshift-bot:synchronize-upstream

openshift-bot commented Jul 15, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

openshift-ci-robot commented Jul 15, 2026

Uh oh!

coderabbitai Bot commented Jul 15, 2026 •

edited

Loading

❌ Failed checks (1 warning)

Uh oh!

openshift-ci Bot commented Jul 15, 2026

Uh oh!

openshift-ci Bot commented Jul 15, 2026

Uh oh!

perdasilva commented Jul 15, 2026

Uh oh!

openshift-ci Bot commented Jul 16, 2026

Uh oh!

perdasilva commented Jul 21, 2026

Uh oh!

openshift-ci Bot commented Jul 22, 2026

Uh oh!

openshift-ci Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

openshift-bot commented Jul 15, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

openshift-ci-robot commented Jul 15, 2026

Uh oh!

coderabbitai Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

openshift-ci Bot commented Jul 15, 2026

Uh oh!

openshift-ci Bot commented Jul 15, 2026

Uh oh!

perdasilva commented Jul 15, 2026

Uh oh!

openshift-ci Bot commented Jul 16, 2026

Uh oh!

perdasilva commented Jul 21, 2026

Uh oh!

openshift-ci Bot commented Jul 22, 2026

Uh oh!

openshift-ci Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

openshift-bot commented Jul 15, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 15, 2026 •

edited

Loading